Thursday, July 16, 2009

Canadian Privacy Laws & Online Networking

A report form the Office of the Privacy Commissioner of Canada has found that facebook breaches Canadian privacy law. The report responds to 24 complaints, and while most were unfounded or resolved there are four cases that are of concern.

Here's a bit from the executive summary (bolding by me):

On the remaining subjects of third-party applications, account deactivation and deletion, accounts of deceased users, and non-users’ personal information, the Assistant Commissioner likewise found Facebook to be in contravention of the Act and concluded that the allegations were well-founded. In these four cases, there remain unresolved issues where Facebook has not yet agreed to adopt her recommendations. Most notably, regarding third-party applications, the Assistant Commissioner determined that Facebook did not have adequate safeguards in place to prevent unauthorized access by application developers to users’ personal information, and furthermore was not doing enough to ensure that meaningful consent was obtained from individuals for the disclosure of their personal information to application developers.